CVE-2026-68553

Coturn (open-source TURN/STUN server) prior to 4.13.0 is affected by a format string vulnerability in its Redis integration. An authenticated TURN user can inject printf-style format specifiers into the STUN USERNAME or REALM attribute. These values pass is_secure_string() validation and are embe...

CVE-2026-68553 Coturn: Format String Injection via TURN USERNAME/REALM into hiredis Redis Command

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.13.0, an authenticated TURN user can place printf-style format specifiers in the STUN USERNAME or REALM attribute, which passes issecurestring validation and is embedded into Redis keys at nine call sites in...

CVE-2026-68553 Coturn: Format String Injection via TURN USERNAME/REALM into hiredis Redis Command

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.13.0, an authenticated TURN user can place printf-style format specifiers in the STUN USERNAME or REALM attribute, which passes issecurestring validation and is embedded into Redis keys at nine call sites in...

CVE-2026-68553

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.13.0, an authenticated TURN user can place printf-style format specifiers in the STUN USERNAME or REALM attribute, which passes issecurestring validation and is embedded into Redis keys at nine call sites in...

CVE-2026-15961

IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 IBM PowerVM could allow a local attacker to obtain sensitive information or cause a denial of service due to improper control of format strings...

CVE-2026-15961

IBM PowerVM Hypervisor is affected by a format string vulnerability (CWE-134) in firmware versions FW1120.00, FW1110.00–FW1110.30, and FW1060.00–FW1060.80. A local attacker with high privileges can exploit this to obtain sensitive information or cause a denial of service . The CVSS 3.1 score is 5...

CVE-2026-15961 Power System Information Disclosure

IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 IBM PowerVM could allow a local attacker to obtain sensitive information or cause a denial of service due to improper control of format strings...

EUVD-2026-62429

IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 IBM PowerVM could allow a local attacker to obtain sensitive information or cause a denial of service due to improper control of format strings...

CVE-2026-68553: Use of Externally-Controlled Format String

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.13.0, an authenticated TURN user can place printf-style format specifiers in the STUN USERNAME or REALM attribute, which passes issecurestring validation and is embedded into Redis keys at nine call sites in...

CVE-2026-15961: Use of Externally-Controlled Format String

IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 IBM PowerVM could allow a local attacker to obtain sensitive information or cause a denial of service due to improper control of format strings...

PT-2026-78431

Name of the Vulnerable Software and Affected Versions IBM PowerVM Hypervisor version FW1120.00 IBM PowerVM Hypervisor versions FW1110.00 through FW1110.30 IBM PowerVM Hypervisor versions FW1060.00 through FW1060.80 Description Improper control of format strings may allow a local attacker to obtai...

CVE-2026-62292

libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.1, a crafted uncompressed HEIF image using generic zlib unci full-item compression can crash an application that decodes an advertised tile with heifimagehandledecodeimagetile. In...

ROS-20260818-73-0001

The vulnerability in Wireshark is related to the use of uncontrolled format lines. The vulnerability can be exploited remotely...

org.http4k:http4k-aws (2.18.0), org.http4k:http4k-client-apache (2.18.0) +13 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (2.18.0)

org.http4k:http4k-core MAVEN version 2.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 2.18.0 - org.http4k:http4k-client-apache 2.18.0 - org.http4k:http4k-client-okhttp 2.18.0 -...

org.http4k:http4k-client-apache (1.21.1), org.http4k:http4k-client-okhttp (1.21.1) +7 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (1.21.1)

org.http4k:http4k-core MAVEN version 1.21.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-apache 1.21.1 - org.http4k:http4k-client-okhttp 1.21.1 - org.http4k:http4k-contract 1.21....

org.http4k:http4k-client-apache (1.23.0), org.http4k:http4k-client-okhttp (1.23.0) +8 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (1.23.0)

org.http4k:http4k-core MAVEN version 1.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-apache 1.23.0 - org.http4k:http4k-client-okhttp 1.23.0 - org.http4k:http4k-contract 1.23....

org.http4k:http4k-aws (2.21.1), org.http4k:http4k-client-apache (2.21.1) +13 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (2.21.1)

org.http4k:http4k-core MAVEN version 2.21.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 2.21.1 - org.http4k:http4k-client-apache 2.21.1 - org.http4k:http4k-client-okhttp 2.21.1 -...

org.http4k:http4k-aws (2.24.0), org.http4k:http4k-client-apache (2.24.0) +13 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (2.24.0)

org.http4k:http4k-core MAVEN version 2.24.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 2.24.0 - org.http4k:http4k-client-apache 2.24.0 - org.http4k:http4k-client-okhttp 2.24.0 -...

org.http4k:http4k-format-argo (0.21.0), org.http4k:http4k-format-jackson (0.21.0) +2 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (0.21.0)

org.http4k:http4k-core MAVEN version 0.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-format-argo 0.21.0 - org.http4k:http4k-format-jackson 0.21.0 - org.http4k:http4k-server-netty...

org.http4k:http4k-client-apache (1.22.2), org.http4k:http4k-client-okhttp (1.22.2) +8 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (1.22.2)

org.http4k:http4k-core MAVEN version 1.22.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-apache 1.22.2 - org.http4k:http4k-client-okhttp 1.22.2 - org.http4k:http4k-contract 1.22....